Leadership

Master the human side of GRC leadership that nobody teaches but everyone needs. Leading security teams that do not hate you, influencing executives who actually listen, and making GRC decisions that stick. For senior pros who want respect, not just compliance checkmarks.

11 Jun 2025 Leadership

The Communications Game

Most security failures aren't about missing "controls" in "frameworks". They're about missed connections. In GRC, your ability to listen, translate, and build trust matters more than any framework. Here's what I learned the hard way.

01 May 2025 Leadership Featured

When I Stopped Needing to Be Right

GRC isn’t just about frameworks and risk matrices: it’s fundamentally about people. And people are anything but simple.

01 May 2024 Leadership

Why Training Every Employee is Security Theater (And What Actually Works)

Building an efficient information security management system is not just about policies, data, and metrics. We must influence leadership to build secure organizations. The secret ingredient? Security people's innate sense of community.

10 Apr 2024 Leadership

Cybersecurity is all about relationships

How you can build relationships by being relevant to your colleagues and harnessing your influence to provoke lasting security improvements to information systems.

29 Nov 2023 Leadership

You don’t go into cybersecurity to make friends

Stories about how I've come to embrace security's role as the "bad cops" in enterprises. My secret? Staying grounded in security's core purpose, which is to defend best practices and integrity.